CVEs published in September 2019
1,651 vulnerabilities, 183 critical, 11 exploited.
- liferay portalLiferay Portal Vulnerable to Cross-Site Scripting (XSS) via a Journal Article Title6.1 Medium
- limesurveyAn XML injection vulnerability was found in Limesurvey before 3.17.14 that allows remote...8.8 High
- limesurveyA clickjacking vulnerability was found in Limesurvey before 3.17.14.4.3 Medium
- limesurveyA path disclosure vulnerability was found in Limesurvey before 3.17.14 that allows a remote...5.3 Medium
- limesurveyIn Limesurvey before 3.17.14, the entire database is exposed through browser caching.7.5 High
- doccmsupload_model() in /admini/controllers/system/managemodel.php in DocCms 2016.5.17 allow remote...9.8 Critical
- limesurveyA stored cross-site scripting (XSS) vulnerability was found in Limesurvey before 3.17.14 that...5.4 Medium
- limesurveyLimesurvey before 3.17.14 does not enforce SSL/TLS usage in the default configuration.5.3 Medium
- limesurveyLimesurvey before 3.17.14 allows remote attackers to bruteforce the login form and enumerate...5.3 Medium
- limesurveyIn Limesurvey before 3.17.14, admin users can mark other users' notifications as read.2.7 Low
- limesurveyA reflected cross-site scripting (XSS) vulnerability was found in Limesurvey before 3.17.14 that...6.1 Medium
- limesurveyIn Limesurvey before 3.17.14, admin users can run an integrity check without proper permissions.2.7 Low
- limesurveyA CSV injection vulnerability was found in Limesurvey before 3.17.14 that allows survey...9.8 Critical
- limesurveyIn Limesurvey before 3.17.14, admin users can view, update, or delete reserved menu entries...7.2 High
- gitlabAn issue was discovered in GitLab Community and Enterprise Edition before 11.5.8, 11.6.x before...6.5 Medium
- limesurveyIn Limesurvey before 3.17.14, admin users can access the plugin manager without proper permissions.7.2 High
- limesurveyLimesurvey before 3.17.14 uses an anti-CSRF cookie without the HttpOnly flag, which allows...7.5 High
- gitlabAn issue was discovered in GitLab Community and Enterprise Edition 8.x (starting in 8.9), 9.x, 10...3.7 Low
- gitlabAn issue was discovered in GitLab Community and Enterprise Edition 10.x (starting in 10.7) and 11...4.3 Medium
- gitlabAn issue was discovered in GitLab Enterprise Edition 10.x (starting in 10.6) and 11.x before 11.5...4.3 Medium
- dlink dir-868l firmware, dir-885l firmware, dir-895l firmware +2 moreSharePort Web Access on D-Link DIR-868L REVB through 2.03, DIR-885L REVA through 1.20, and DIR...9.8 Critical
- gitlabAn issue was discovered in GitLab Community and Enterprise Edition 8.x, 9.x, 10.x, and 11.x...6.5 Medium
- gitlabAn issue was discovered in GitLab Community and Enterprise Edition 9.x, 10.x, and 11.x before 11...9.8 Critical
- gitlabAn issue was discovered in GitLab Community and Enterprise Edition before 11.5.8, 11.6.x before...5.4 Medium
- gitlabAn issue was discovered in GitLab Community and Enterprise Edition before 11.5.8, 11.6.x before...4.3 Medium
- gitlabAn issue was discovered in GitLab Enterprise Edition before 11.5.8, 11.6.x before 11.6.6, and 11...7.0 High
- gitlabAn issue was discovered in GitLab Community and Enterprise Edition before 11.5.8, 11.6.x before...5.3 Medium
- gitlabAn issue was discovered in GitLab Community and Enterprise Edition before 11.5.8, 11.6.x before...4.3 Medium
- gitlabAn issue was discovered in GitLab Community and Enterprise Edition before 11.5.8, 11.6.x before...7.5 High
- gitlabAn issue was discovered in GitLab Community and Enterprise Edition before 11.5.8, 11.6.x before...6.5 Medium
- gitlabAn issue was discovered in GitLab Community and Enterprise Edition before 11.5.8, 11.6.x before...6.5 Medium
- gitlabAn issue was discovered in GitLab Community and Enterprise Edition before 11.5.8, 11.6.x before...6.1 Medium
- gitlabAn issue was discovered in GitLab Community and Enterprise Edition before 11.5.8, 11.6.x before...8.8 High
- gitlabAn issue was discovered in GitLab Community and Enterprise Edition before 11.5.8, 11.6.x before...7.5 High
- gitlabAn issue was discovered in GitLab Community and Enterprise Edition 9.x, 10.x, and 11.x before 11...6.5 Medium
- gitlabAn issue was discovered in GitLab Community and Enterprise Edition before 11.8.9. It has...5.4 Medium
- gitlabAn issue was discovered in GitLab Community and Enterprise Edition before 11.8.9, 11.9.x before...6.1 Medium
- gitlabAn issue was discovered in GitLab Community and Enterprise Edition before 11.8.9, 11.9.x before...5.3 Medium
- gitlabAn issue was discovered in GitLab Community Edition 11.9.x before 11.9.10 and 11.10.x before 11...4.3 Medium
- gitlabAn issue was discovered in GitLab Community and Enterprise Edition 8.x, 9.x, 10.x, and 11.x...4.3 Medium
- limesurveyCross-site Scripting in LimeSurvey5.4 Medium
- limesurveyCross-site Scripting in LimeSurvey5.4 Medium
- gitlabAn issue was discovered in GitLab Community and Enterprise Edition 11.8.x before 11.8.10, 11.9.x...7.5 High
- gitlabAn authentication issue was discovered in GitLab that allowed a bypass of email verification....7.2 High
- gitlabAn input validation and output encoding issue was discovered in the GitLab email notification...5.4 Medium
- gitlab, gitlab ce/ee +1 moreAn input validation and output encoding issue was discovered in the GitLab CE/EE wiki pages...5.4 Medium
- gitlab, gitlab ce/ee +1 moreAn authorization issue was discovered in the GitLab CE/EE CI badge images endpoint which could...5.3 Medium
- gitlab, gitlab community edition +1 moreAn input validation problem was discovered in the GitHub service integration which could result...3.5 Low
- senecajs senecaSensitive Data Exposure in seneca5.3 Medium
- apache traffic controlImproper Authentication in Apache Traffic Control9.8 Critical
- Show moreLoading…